Navigating the Future with Windows 365: Your Complete Cloud-Based Workspace
Cloud computing has transformed the business landscape, offering unparalleled flexibility and efficiency. A leader in this evolution is Microsoft...
2 min read
cloudservuscom Jun 2, 2020 4:53:57 AM
Previously when creating queries for dynamic membership rules in Azure AD, you would have to create the group, then provide the syntax, and then wait anywhere from 5-10 minutes while Azure AD evaluates the group members. When first starting out, this can add up to hours of timing waiting for results. Microsoft now has added rules validation into Azure AD Dynamic groups. This is currently in preview, and saves quite a bit of time when unsure about the syntax of your queries. When getting started Microsoft does provide some documentation below:
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-dynamic-membership
In this example, I am creating an Azure AD Dynamic Device group for Windows 10 1909 devices. Once I add my syntax, I can now click on Validate Rules and test.
Next click on +Add Devices to provide test cases for your rule syntax.
Add your test workstation devices from Azure AD and click Validate.
Click View details to find out why a device does not match the query.
In this case, the workstation was a BYOD device instead of Company owned.
This small, but nice, quality of life addition to Azure AD groups can save you quite a bit of time when setting up Dynamic User or Dynamic Device groups in Azure AD. Here are some common syntax strings useful when managing Windows 10 with Intune in Azure AD as well:
(device.deviceOSType -eq “Windows”) and (device.deviceOwnership -eq “Company”)
(device.deviceOSVersion -startsWith “10.0.18363”) and (device.deviceOwnership -eq “Company”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSVersion -startsWith “10.0.18362”) and (device.deviceOwnership -eq “Company”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSVersion -startsWith “10.0.17763”) and (device.deviceOwnership -eq “Company”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSVersion -startsWith “10.0.17134”) and (device.deviceOwnership -eq “Company”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSType -eq “Windows”) and (device.deviceOwnership -eq “Personal”)
(device.deviceOSVersion -startsWith “10.0.18363”) and (device.deviceOwnership -eq “Personal”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSVersion -startsWith “10.0.18362”) and (device.deviceOwnership -eq “Personal”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSVersion -startsWith “10.0.17763”) and (device.deviceOwnership -eq “Personal”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
(device.deviceOSVersion -startsWith “10.0.17134”) and (device.deviceOwnership -eq “Personal”) and (device.deviceOSType -eq “Windows”) and (device.managementType -eq “MDM”)
Cloud computing has transformed the business landscape, offering unparalleled flexibility and efficiency. A leader in this evolution is Microsoft...
It’s more important than ever today for businesses to make data-driven decisions. But while 90% of organizations indicate that data is increasingly...
The deadline for Windows Server 2012 support is fast approaching; the end of support date is October 10th, 2023. As this technology is set to become...